Method and system for securing data from a non-point of sale device over a lan

Abstract

A data control system for a local area network ( 100 ) prevents non-point of sale devices ( 135,155 ) from sending data to point of sale devices ( 125,145 ) on the local area network ( 100 ) but allows non-point of sale devices ( 135,155 ) to send data to other non-point of sale devices ( 135,155 ) on the local area network. The data control system may define a non-point of sale network ( 130,150 ) within the local area network ( 100 ) and determine the data is from the non-point of sale network ( 130,150 ) if the data is associated with a service set identifier or a port corresponding to the non-point of sale network ( 130,150 ). The data control system may also prevent wireless non-point of sale devices ( 135 ) from sending data to wired non-point of sale devices ( 155 ) and prevent wired non-point of sale devices ( 155 ) from sending data to wireless non-point of sale devices ( 135 ).

1 . A method, performed by a data control system, for securing data on a local area network having one or more point of sale devices and one or more non-point of sale devices, the method comprising the steps of:
 (a) determining the data is from a first non-point of sale device on the local area network;   (b) preventing the data from the first non-point of sale device from being sent to a point of sale device on the local area network; and   (c) allowing the data from the first non-point of sale device to be sent to a second non-point of sale device on the local area network.   
     
     
         2 . The method of  claim 1 , further comprising the step of defining within the local area network a non-point of sale network, and wherein step (a) comprises determining that the data is from a device on the non-point of sale network. 
     
     
         3 . The method of  claim 2 , wherein step (a) comprises determining that the data is associated with a service set identifier corresponding to the non-point of sale network. 
     
     
         4 . The method of  claim 2 , wherein step (a) comprises determining that the data is associated with a port corresponding to the non-point of sale network. 
     
     
         5 . The method of  claim 1 , further comprising the step of defining within the local area network a point of sale network, and wherein step (b) comprises determining that the data is destined for a device on the point of sale network and preventing the data from being sent to the device on the point of sale network. 
     
     
         6 . The method of  claim 1 , further comprising the step of defining within the local area network a non-point of sale network, and wherein step (c) comprises determining that the data is destined for a device on the non-point of sale network. 
     
     
         7 . The method of  claim 1 , wherein step (c) comprises the steps of:
 (c1) allowing the data to be sent from a wireless non-point of sale device to a second wireless non-point of sale device; and   (c2) preventing the data from being sent from a wireless non-point of sale device to a wired non-point of sale device.   
     
     
         8 . The method of  claim 1 , wherein step (c) comprises the steps of:
 (c1) allowing the data to be sent from a wired non-point of sale device to a second wired non-point of sale device; and   (c2) preventing the data from being sent from a wired non-point of sale device to a wireless non-point of sale device.   
     
     
         9 . The method of  claim 1 , wherein the data control system comprises a router. 
     
     
         10 . The method of  claim 1 , wherein the data control system comprises a router in communication with a secure host. 
     
     
         11 . A data control system for securing data on a local area network having one or more point of sale devices and one or more non-point of sale devices, the method comprising:
 means for determining the data is from a first non-point of sale device on the local area network;   means for preventing the data from the first non-point of sale device from being sent to a point of sale device; and   means for allowing the data from the first non-point of sale device to be sent to a second non-point of sale device on the local area network.   
     
     
         12 . The data control system of  claim 11 , further comprising means for defining within the local area network a non-point of sale network, and wherein the means for determining the data is from a first non-point of sale device comprises means for determining that the data is from a device on the non-point of sale network. 
     
     
         13 . The data control system of  claim 12  wherein the means for determining the data is from a first non-point of sale device comprises means for determining that the data is associated with a service set identifier corresponding to the non-point of sale network. 
     
     
         14 . The data control system of  claim 12  wherein the means for determining the data is from a first non-point of sale device comprises means for determining that the data is associated with a port corresponding to the non-point of sale network. 
     
     
         15 . The data control system of  claim 11 , further comprising means for defining within the local area network a point of sale network, and wherein the means for preventing the data from the first non-point of sale device from being sent to the point of sale device comprises means for determining that the data is destined for a device on the point of sale network and preventing the data from being sent to the device on the point of sale network. 
     
     
         16 . The data control system of  claim 11 , further comprising means for defining within the local area network a non-point of sale network, and wherein the means for allowing the data from the first non-point of sale device to be sent to the second non-point of sale device on the local area network comprises means for determining that the data is destined for a device on the non-point of sale network. 
     
     
         17 . The data control system of  claim 11 , wherein the means for allowing the data from the first non-point of sale device to be sent to the second non-point of sale device on the local area network comprises:
 means for allowing the data to be sent from a wireless non-point of sale device to a second wireless non-point of sale device; and   means for preventing the data from being sent from a wireless non-point of sale device to a wired non-point of sale device.   
     
     
         18 . The data control system of  claim 11 , wherein the means for allowing the data from the first non-point of sale device to be sent to the second non-point of sale device on the local area network comprises:
 means for allowing the data to be sent from a wired non-point of sale device to a second wired non-point of sale device; and   means for preventing the data from being sent from a wired non-point of sale device to a wireless non-point of sale device.   
     
     
         19 . The data control system of  claim 11 , wherein the data control system comprises a router. 
     
     
         20 . The data control system of  claim 11 , wherein the data control system comprises a router in communication with a secure host.